Possa's questions

I scanned a subnet (16 hosts) while dumping the network traffic with wireshark. I did it 2 times and I noticed that in the traffic there is the normal SYN-SYN/ACK and SYN-RST from open/closed port, but also there are thousands of SYN-SYN/ACK (and ACK for closing connections) from a specific port (first scan was port 111, second scan was port 22).

Why is nmap opening all this connection to the same port on multiple hosts multiple time?

The lenght of the packet is always the same: 78.

Thanks,

Filippo

edit: the command I run was:

nmap -vv -P0 -sT -O -T5 -p 1-65535 -iL target.txt -oX target.xml

I'm looking for some best practices or Security guidelines for Firewall and VPN. Trying to study a little more about network security and write a sort of decalogue (set of rules). Usefull to follow when implementing a new system. Any ideas?

Thanks.

I have a technical and precise question about two type of configuration about LDAP, pam configuration files and nsswitch.conf.
Wich is the difference between the passwd_compat configuration and the pam_list?
I'm quite confused...thanks in advance.
Filippo

I want to add a user (from Sun IDM to Active Directory) to more than one group.
The command memberOf: CN=AAA,OU=AAA,DC=AAA,DC=AAA is for only one and I want to add a second one immediatly after the first; e.g.:
memberOf: CN=AAA,OU=AAA,DC=AAA,DC=AAA and CN=BBB,OU=BBB,DC=BBB,DC=BBB

I have a linux machine used as gateway for a Win XP machine. Both are in Virtual machine for testing purpose. Now I want to trick the Win XP user (me) with the forwarding of an IP address: I want to change the destination IP address.

For example I want to go to 1.1.1.1 but linux gateway change it to 2.2.2.2 So if I'm expecting the web page of 1.1.1.1, I'll get the changed one, the one of 2.2.2.2 For example I want to go to Facebook and I'm forced to Google home page.

How can I do it? With prerouting? Because I've done lot of tries, but no one working :(